Motorola Solutions, Inc.

Motorola Corporation

Steven K Turner

Chris A Kruegel

Andrzej Grzesik

Mark Shahaf

Ronald S Core

Konrad Papierz

Lloyd J Johnson

James P Peterson

Chi Fai Sze

Systems and methods for authenticating public key infrastructure certificate enrollment using certificate entitlement licenses. One example system includes a device manager including an electronic processor. The electronic processor is configured to receive a request for software for an electronic device including a unique electronic device identifier. The electronic processor is configured to determine, based on the request, whether the electronic device is entitled to participate in a certificate management service. The electronic processor is configured to, responsive to determining that the electronic device is entitled to participate in a certificate management service, transmit a certificate entitlement license request including the unique device identifier to a certificate entitlement license manager. The electronic processor is configured to receive, from the certificate entitlement license manager, a certificate entitlement license for the unique device identifier. The electronic processor is configured to deliver the certificate entitlement license based on the unique device identifier.

Certificate entitlement licenses for authenticating public key infrastructure certificate enrollment

A mobile device and method are provided that allow for registering the mobile device using a machine readable optical label. The mobile device receives a machine readable optical label, such as a QR code or a bar code. The machine readable optical label includes authentication data and security information. The mobile device scans machine readable optical label to read the authentication data and the security information. The mobile device validates the machine readable optical label and generates certificate request, the certificate request digitally signed using the authentication data and the security information. The mobile device transmits the certificate signing request to a registration authority.

Method of utilizing a trusted secret package for certificate enrollment

A method, mobile device, and PKI are provided for enrolling a mobile device into a PKI domain for certificate management is provided. A first asymmetric key pair and a unique identifier is established in a device. The first asymmetric key pair includes a public key and a private key. The public key and the unique identifier are transferred to the PKI domain. The public key and the unique identifier are imported into the PKI domain. The device generates a second asymmetric kay pair and sends a certificate signing request (CSR) that is protected with the digital signature of the first asymmetric key pair. The CSR is transferred to the PKI domain. The PKI domain authenticates the CSR using the first public key and the unique identifier. Upon validation, the PKI domain issues a certificate to the device.

Method of enrolling a device into a PKI domain for certificate management using factory key provisioning

In a network supporting concurrent services, mobile terminated call delivery processing is simplified by an apparatus and method for forcing a Mobile Station (MS) ( ) to register with a new Mobile Switching Center (MSC) ( ) after a hard handoff has occurred. The mobile station registers with the new MSC when the mobile station is in an active data call, but not in an active voice call. The method momentarily sends the data session to dormant mode while the mobile station performs location updating. The method utilizes a new information element in a Clear Command message that allows the MSC to indicate to the Base Station Controller ( ) that the period a data session must remain dormant should be very brief. This brief period of time limits the impact on the MS user.

Growing community of inventors

Cary, IL, United States of America

Steven K Turner